orcon in 10 minutes

© Cocoon Data Holdings Limited 2013. All rights reserved.

COVATA SELF-DEFENDING DATA (in 10 minutes)

Vic Winkler CTO

Covata USA, Inc Reston, Virginia


Can You Control Unprotected Data?

No.

Adding strong security components to an otherwise weak system is usually NOT effective

X


First, Control The Data

Adding strong security components to an otherwise weak system is usually NOT effective

Encrypt the data and apply access controls

Access Controls

Persisting Control

X ✔encrypted


Self-Defending Data

•  Doesn’t grant access unless you meet it’s requirements •  Doesn’t care if the computer or network are hacked •  Every access is audited •  Originator can revoke access anytime •  …Every copy behaves the same way


So, What is ORCON?

•  History: U.S. Intelligence Community -  Desired “Originator Control” in Closed-Network Information Sharing

Examples: Rescind Access; Prevent Forwarding

•  Extends classic access controls

•  Has elements of: DRM, MAC, RBAC, ABAC, and

Capability-Based approaches

ORCON Persisting

Originator Control over Data

Data }


ORCON …

•  Does it have to be “Originator” control? Not always.

The enterprise may require default controls

Other systems like DLP might “attach” additional ORCON

•  It is a flexible framework for persisting controls

…But, but how does it work?


Policy Enforcement & Caveats


Covata ORCON is Built on Other Access Control Models

•  Again, the goal is control over your data -  ORCON extends your control

-  It empowers control and sharing (X-domain and ad-hoc)

•  In brief, ORCON: -  Extends traditional access controls with “persistent controls”

-  These persistent controls can be “shaped” to meet your security needs

•  ORCON is more lightweight than DRM | IRM | MAC •  ORCON is more flexible than DRM | IRM | MAC


What Is It?

REST API

SO 2.1 Server

Client Apps

Java API

Client Apps

Java API

Client Apps

Java API

Client Apps

Java API

Client Apps

Java API

WindowsApps

C# API

Client Apps

Java API

Client Apps

Java API

iPhone/ iPad Apps

Objective C API

Client Libraries

REST API


…What Is?


Ranges of Use-Cases in Cloud


Value Proposition

•  Accessible Crypto for Developers (helper libs)

•  FIPS Compliant Crypto and Key Management

•  All Accesses to Secured Data are ALWAYS Audited

•  Persistent and Fine-Grained Originator Control Covata provides technology that enables persisting owner control over data for compliance with regulatory, privacy, security or data governance requirements

orcon in 10 minutes

Technology

data data

data orcon

cocoon data holdings

unprotected data

data governance requirements

covata selfdefending

control x

access control models