Home News Cloud Box delivers encryption management to boost security for enterprise customers Box believes it has cracked one of the last remaining concerns for security conscious and heavily regulated industries with the introduction of an Enterprise Key Management product. <\/p>\n
Share <\/p>\n
Box Enterprise Key Management (EKM), currently in beta, gives businesses the ability to maintain exclusive control over their encryption keys. The technology is currently being delivered via Amazon Web Services and Gemalto. <\/p>\n
\"In the old days, if you wanted to encrypt and protect data inside your organisation, IT could set it up,\" said Rand Wacker, Box's vice president of enterprise products. \"But if you tried to share something across organisations, that's usually where stuff broke down.\" <\/p>\n
Aimed at users in highly regulated industries such as finance, government, legal and healthcare as well as geographies such as Germany, Box EKM is designed to help enterprises reap the rewards of cloud computing while still maintaining control over encryption, he said. <\/p>\n
Box, which IPO'd last month, and has its European HQ in London, already makes sure all content it stores is already encrypted, Wacker noted. What's new is that Box EKM externalises management of the associated encryption keys. <\/p>\n
\"When a customer uploads a file, it's encrypted with a unique key for that file,\" he said. \"What happens today is that the file-specific key is encrypted by an internal key-management system.\" <\/p>\n
With the new capability, however, customers get control over that key and the auditing of it. <\/p>\n
The key infrastructure is provided by a dedicated AWS CloudHSM appliance leveraging Gemalto's SafeNet Hardware Security Modules (HSM) for key encryption and protection. Customers retain full control of their keys and cryptographic operations while Amazon manages and maintains the hardware. <\/p>\n
Box EKM not only separates encrypted data and the keys used to manage it, but also creates an audit log for the customer's review. <\/p>\n
<\/p>\n