Digital Design: The protected mobility

"The protected Mobility: Mobile CryptoBox" provides safe connection and interaction of staff of the commercial organizations and public institutions of c with information resources by means of mobile devices. For data protection in the complete solution the Russian cryptographic standards (GOST) are used. The solution "the Protected Mobility: Mobile CryptoBox" is available to devices with operating systems iOS and Android.

Architecture (July, 2018)

The solution allows:

• Provide full participation of employees in corporate communications without information leaks and without prohibition on use of personal devices (to ensure safety of implementation of the concept of BYOD).
• Separate a personal and working space on the mobile device.
• Provide secure access to local data and confidentiality of information stored on the mobile device.
• Provide cryptostrong encryption of transmitted data.
• Provide an opportunity to build in existing applications on the protected Wednesday and to exchange the ciphered data between applications in it.
• Provide compliance to the Russian cryptographic standards (GOST) at storage and data transmissions.

2018: The version "The protected mobility 2.0: Mobile CryptoBox"

On July 11, 2018 the Digital Design company announced release of the next version of the software product "The protected mobility 2.0: Mobile CryptoBox". This complete solution for safe work of c as information resources and interactions of staff of the commercial organizations and public institutions via mobile devices, including personal.

The Digital Design company submitted the next version of the software product "The protected mobility 2.0: Mobile CryptoBox"

"The protected mobility 2.0" includes a set of ready applications: e-mail client, office calendar, file storage, reference book of contacts, app store. Version 2.0 differs in approach to information security mobile applications: in Mobile CryptoBox an opportunity to build in applications on the protected Wednesday that provides safe data exchange between these applications is implemented. For data protection at storage, work with them and by transfer cryptographic information security tools "CryptoPro CSP", GOST conforming to requirements are used. The application is available to users of devices with operating systems iOS and Android, noted in Digital Design.

Need of structural changes of a product line, according to the developer, was caused both by evolution of operating systems, and change of a vector of business challenges of customers – aspiration to integrity of solutions and security.

"With an exit "The protected mobility 2.0" we are ready to place any applications of customers in the so-called protected environment, or a container, using specialized SDK. It is possible to place an unlimited number of applications in a container that expands functionality of an end product. Users will be able quietly to communicate between applications in this ecosystem, all data will be protected. This product for all who are puzzled with security in the company or a state institution. It is the tool for implementation of the full concept of BYOD (Bring Your Own Device). For work with corporate data there is no need to use the working smartphone, "The protected mobility 2.0: Mobile CryptoBox" does safe work and from the personal device. Management of the settings and security policies used in applications happens on a centralized basis. Also we plan development of the solution regarding support of international standards of information security for data exchange between users from the different countries". Igor Yankovsky, head of mobile development Digital Design

2017

The participant of a pilot project on transition of federal state agencies to the domestic office software

In May, 2017 came to the end pilot project Ministry of Telecom and Mass Communications Russia on transition of federal executive authorities and state non-budgetary funds to use of domestic office software (S). 16 products from Unified register of the Russian software, including two products of the company "Digital Design" – SDU "Priority" on the platform Docsvision ECM and a product line "The protected mobility" became project participants.

During the project specialists Digital Design provided user training, told about functionality and advantages of programs. On a check result the working group creates the report on readiness of software implementation in government institutions, makes recommendations about completions.

According to this resolution treat the office software, including email applications, an organizer, file manager and also electronic document management systems and means of antivirus protection. Therefore from all products Digital Design included in the register took part in the first pilot project "The protected mobility" and SDU "Priority". Special requirements for each software are stated in the resolution. As for electronic document management systems, the detailed description of all processes of documentary management and the requirement to information security are stated in the separate document – the Order of the Ministry of Telecom and Mass Communications of the Russian Federation of September 2, 2011 No. 221.

Partnership with Scientific Research Institute SOKB

"Scientific and test institute of the systems of ensuring complex security" (Scientific Research Institute SOKB) and Digital Design signed the agreement on strategic partnership for the purpose of implementation and promotion of solutions based on own developments.

Joint efforts will allow the companies to propose to potential customers the solution SafePhone of the class MDM (Mobile Device Management) and a line of the applications "The Protected Mobility" within uniform mobile jobs of employees ^[1]

2014: Compatibility of "The protected mobility" and StoneGate SSL

On February 27, 2014 the companies Digital Design also Stonesoft announced completion of testing of the products for compatibility.

StoneGate SSL VPN and a product line "The protected mobility" for ensuring secure remote access are compatible - now the users StoneGate SSL VPN working at the platform Apple iOS have an opportunity to start on tablets iPad the applications "The Protected Mail", "The Protected Calendar", "The Protected Browser" and others.

2013

Integration with Rutoken of the EDS of Bluetooth for iOS

On December 10 the Digital Design company announced integration of The Protected Mobility software product for iOS with technologies of cryptographic information protection of Krypto-PRO and development of Aktiv company - Rutoken the EDS of Bluetooth.

Start of a product line "The protected mobility"

The Digital Design company announced in May, 2013 an exit of a product line "The protected mobility". Software products of a new line allow the employee to interact safely with corporate information by means of mobile devices on the IOS platform – iPad and iPhone. The unique product characteristic of a line is support of the certified means of cryptographic information protection according to requirements of GOST (GOST 28147-89, GOST P 34.10-2001, GOST P 34.11-94) and FSB of Russia on a class of security of KC1.

The product is included in the Unified register of the Russian programs for electronic computers and databases.

The current version of a line "The protected mobility" includes 7 independent IOS-APPLICATIONS: "The protected browser", "The protected mail", "The protected calendar", "The protected address directory", "The protected tasks", "The protected folder" and "The protected tunnel". Each of products implements the data protection functions meeting the modern requirements of the Russian organizations and national information security standards.

In products of the line the means of cryptographic information protection certified by FSB of Russia in combination with complex measures of counteraction to leaks and attempts of receiving unauthorized access to information are applied.

"The protected mobility" is focused on the state and commercial organizations which staff using mobile devices gets access to the information resources containing data of confidential character, limited access or personal data of employees and clients. Components of a line conform to requirements for placement and work of all nodes of a system within infrastructure borders of the organization, without allowing intermediate broadcasting, storage or accumulation of confidential information outside its area of responsibility.

Each product of the line "The protected mobility" is the independent, finished IOS-APPLICATION available to acquisition as a part of simple or difficult configurations. All line answers the uniform principles of security, architecture and the user interface that it allows to increase a final configuration, without being afraid of compatibility issues both applications among themselves, and data which these applications exchange.

"The protected browser" – the application intended for safe work with external and internal web resources. The browser supports the Russian and western cryptographic algorithms applied to implementation of protocols of SSL/TLS at accomplishment of enciphering of contents of locally loaded pages, at execution of operations of the electronic signature (ES) using the qualified certificate. Examples of the platforms supporting transaction EDS in The Protected Browser environment are Sberbank-AST, "Roseltorg", the portal of state services, electronic document management systems, etc.

The set of applications "The protected mail", "The protected calendar", "The protected address directory" and "The protected tasks" does users of iPad and iPhone devices by full-fledged participants of all processes of electronic interaction in an ecosystem of the company constructed on components, standard for corporate environment, such as Active Directory, Certification center, Exchange Server or Lotus Domino, etc.

In addition to traditional functions of an e-mail client, "The protected mail" supports the S/MIME protocol. The S/MIME protocol allows to reach the unprecedented level of confidentiality of mail communication and also to guarantee integrity and reliability of correspondence due to use of enciphering and the electronic digital signature of messages.

Thanks to the product "The Protected Folder" mobile users have access to the documents which are in corporate file libraries, such as network folders Windows, MOSS the server (Sharepoint), FTP resources, etc. at any moment. "The protected folder" does process of connection, network interaction and local data storage on the IOS-DEVICE safe and simple in use.

"The protected tunnel" – the unique IOS-APPLICATION of the class SSL VPN Client which is automatically creating a safe tunnel on the basis of TLS (GOST algorithms) around random data which other IOS-APPLICATIONS exchanges with information systems of the organization for protocols of HTTP/HTTPS. Unlike competitive products of similar appointment, "The protected tunnel" does not require accomplishment of the procedure of cracking (jailbreak) of the device.

More than 20 large Russian companies use separate products of the line "The protected mobility". As representatives of the companies note, the trial operational stage of betas of products in practice showed their efficiency and simplicity of application. These applications allowed to separate reliably corporate information from personal, without causing inconveniences to owners of devices. Development of a series of products within a uniform line "The protected mobility" allows to reach the maximum integration of functions, creating the protected circuit continuous cryptographic around corporate data.

Notes