NEWS AND EVENTS

Press Releases

Cryptzone introduces Encrypted Content Search for SharePoint

January 26, 2014

Enabling use of SharePoint search capabilities to find encrypted content with results filtered according to user permissions

Cryptzone, the IT security and threat mitigation specialist, today unveiled an impressive new version of its leading Microsoft SharePoint document security solution, Secured eCollaboration. In this latest version, powerful new features have been added that truly secure content, without impeding searchability and collaboration between internal and external teams - both crucial capabilities for SharePoint projects. Essentially, the results are filtered according to a user's permissions, ensuring confidential information is only disclosed to those with the correct clearance.

"Organizations increasingly recognize the need to secure confidential information stored within SharePoint repositories," explains Anders Hansson, Product Portfolio Manager at Cryptzone. "Traditionally, SharePoint's search functionality leaves files encrypted at rest undiscoverable. This requires organizations to make trade-offs between their security posture, user productivity and convenience. By developing Encrypted Content Search in our Secured eCollaboration solution, we get around this deficiency, without compromising security."

Utilizing sophisticated approaches to key management and process whitelisting, encrypted content on SharePoint can only be searched and discovered by authorized users. This approach respects the principle of the separation of duties, preventing SharePoint administrators from viewing protected content.

Midwest Operating Engineers IT Services, Corporation (MOEITS), received an early release of the 5.0 update for SEP. Having assessed its new features first hand, its Executive Director - Ron Borden, made the following observations, "The ability to use a SharePoint search across encrypted documents is huge as I no longer have to rely on metadata-only searches for my encrypted content. However, the feature I'm most excited about is the Access Rights Automation as it gives me the ability to create rules based on metadata, content, or some other attribute. This gives me greater control over user access, and very granular security at the document library level, allowing me to create eloquent SharePoint sites, with more control over security than what SharePoint can provide out of the box."

Encrypted Content Search

With Secured eCollaboration installed, authorized users are able to perform search operations from within Microsoft SharePoint and find encrypted content that matches the search criteria entered. Secured eCollaboration makes use of Microsoft iFilter technologies to ensure the process is completely transparent to users, but only returns search results based on a user's entitlement to secured content on a document by document basis. Even though data at rest is fully encrypted and protected, content can quickly and easily be found by those people with the appropriate security clearance. Where necessary, Secured eCollaboration security administrators have added flexibility to enable or disable SharePoint powered file-searches of encrypted content on a user by user basis.

SharePoint Form Based Authentication (FBA) Support

Version 5.0 of Secured eCollaboration also introduces support for SharePoint Form Based Authentication, which provides an alternative means of authentication to SharePoint using a web form. FBA is commonly used as a way of extending access to a SharePoint site for non-Active Directory users, so is ideal for corporate extranets, where supplier, partner and customer access is required. Secured eCollaboration adds an additional layer of non-intrusive protection for sensitive personal and commercial information assets.

Access Rights Automation of SharePoint file permissions

Secured eCollaboration Rule Based Engine can now control SharePoint file permissions, making it possible to create rules that significantly extend SharePoint's native access controls:

  • Automated content-aware access control: Access rules can be defined and based on content, meta-data or other file attributes. For example, if a file containing sensitive information gets uploaded to a public area, RBE can automatically modify the SharePoint access control to prevent unintended exposure.
  • Finer granularity of access rights: Access rights in SharePoint are typically managed at the document library level. With Secured eCollaboration user access can be assigned to individual documents, so if inadvertently moved to an unsecured document library they still retain their assigned user access rights and remain fully protected.
  • Additional value for any Microsoft IRM/RMS setup: Secured eCollaboration makes sure access rights are accurately configured prior to applying encryption.

Centralized File Access Management

The latest version of Secured eCollaboration also adds functionality for security officers to delegate file access to any user on request, or as part of a security audit. This increases the available options in any disaster or recovery process relating to sensitive information. At short notice there is an efficient yet effective way to correct or mitigate risks related to unintended data leakage. The file access management interface allows for assessing the integrity of an organization's file-access perimeters, and provides mitigation options that have global impact instantly. Administrators can quickly locate a file, and grant or remove access to any user in the world - a powerful ability.

Cryptzone will be exhibiting on booth #2137 at Microsoft SharePoint Conference, in Las Vegas, Nevada from March 3-6th 2014.

Notes for Editors:

Encrypted Content Search stored on SharePoint is available for SharePoint 2010 and SharePoint 2013. FAST search and SharePoint Foundation are unsupported. FBA is available for SharePoint 2007 or later.

For more information:

Håkan Saxmo, CTO, Cryptzone AB
Beverley Stonehouse, Head of Marketing & Communications, Cryptzone AB
pr@cryptzone.com
Tel: +44 (0) 1252 419990

Press contact:

Dulcie McLerie
Unique Communications
dulcie@uniquecommunications.co.uk
Tel: +44 (0) 2071 838 039 / +44 (0) 7971 458 230

About the Cryptzone Group

The Cryptzone Group is a technology innovator of proactive controls to mitigate IT security risk. Its solutions enable organizations to securely connect, collaborate and comply within the digital workplace, thereby improving document security, access control and compliance auditing capabilities.

Specializing in encryption content security and secure access technologies, Cryptzone designs solutions that are barely visible to users, yet afford powerful security that protects enterprise information assets, corporate applications, and other network resources, including Microsoft SharePoint environments.

Headquartered in Sweden, the company has offices in the USA, UK and mainland Europe, as well as an extensive global partner network. For more information about the company and its solutions, visit http://www.cryptzone.com/.

Cryptzone's share is listed on First North, Sweden, the Nordic alternative market operated by NASDAQ OMX. Certified Adviser is Thenberg & Kinde Fondkommission AB.