Securing Data Delivery Hassle-Free

The Business Challenge

One of the top banks in the region has an immediate need to establish connections with all its clients in order to securely and reliably transfer sensitive transactional information. The requirements were:

• Either the bank or the client can initiate the file transfer when necessary.
  
• The transmitted data must be encrypted and signed.
  
• The transmission medium must be reliable and fully encrypted. Recovery is an important factor.
  
• Acknowledgement is required for every completed and successful transfer.
  
• The transfer should be as simple as a drag-and-drop action.
  

One of the bank's clients had a slightly unique requirement:

• ONLY this particular client could initiate the file transfer. The file transfer request from the bank will be blocked by using proxy. Acknowledgement was not required for the completion of the transfer.

Our Solution

Based on the requirements outlined by the bank, DSSS proposed the Secure File Delivery (SFD) solution, which was fully customized to address the requirements perfectly.

By implementing the SFD into the system, the following objectives can be achieved:

Objective 1: The loss of information during the transfer is reduced and the exposure of the sensitive information is minimized

By using FASTCopy, the data being transferred can be verified to ensure that no error is received at the destination. The bank can also resume/retry the file transfer operation when there's a breakdown in connection. To make sure that no data can be sniffed by hackers, openSSL is used to encrypt the channel so that nobody can read the data.

Objective 2: The process is automated to ensure the punctuality of data arrival

Punctuality of data arrival is critical in every business. Companies do not want any routine tasks that may delay the data processing. Application Directory Interface (ADI) helps automating the process to avoid the time spent on routine task, thus increasing the efficiency.

Objective 3: The data is encrypted and signed to enforce non-repudiation and integrity

With the use of PKCS#11 Application Programming Interface (API) and USB-based Hardware Security Module (HSM), the data is encrypted, signed and compressed to make sure that nobody can alter, tamper and repudiate it, thus the trust between bank and its clients is established.

The Results

• The bank has extended the usage of SFD solution to other customers.
  
• The secure file transfer is implemented, therefore helping the bank to gain customers' trust.