LOCAL ENCRYPTION AND PROTECTION OF YOUR DATA TRANSFERS

Security is often cited by companies as the prime obstacle to deployment of their mobile projects. To address this legitimate concern, EveryWAN Secure Device is a fully integrated optional component of EveryWAN Mobility Manager which includes strong mutual authentication mechanism between the mobile device and the corporate Information Systems, encryption of wireless data transfer and local data encryption on the mobile devices.

With EveryWAN Secure Device, IT managers can safely deploy authentication certificates to mobile devices over-the-air, without having to spend extensive time to load certificates manually within the IT premises.

Overall, EveryWAN Secure Device is the perfect answer to strong mobile security requirements of MIS, yet being simple and transparent for mobile users out in the field.

- Integrated Public Key Infrastructure allowing mutual strong authentication between all mobile devices and the EveryWAN server based on X509 v3 certificates

- Initial provisioning over-the-air: the certificate of a new device can be sent out securely by the EveryWAN server thanks to a “one-time Strong ID” which is transmitted by the IT administrator to the mobile end-users by phone, e-mail or SMS. This procedure guarantees that the “certificate signing request” comes from a valid mobile device and an authorized user as declared in the EveryWAN central repository.

- AES 128 or 256-bit encryption of all wireless communications applied on data exchange in each and every tunnel as defined in the EveryWAN server

- Automatic download, install and execution of the local device data encryption program: data in existing local directories/files on a mobile device, PIM data (e.g., E-mails with attachments, tasks, contacts, agenda) and/or files stored on removable storage media, can be encrypted using an AES algorithm in real time, according to the configuration defined in the EveryWAN server web-based administration console.

- On-the-fly and on-demand data decryption, applied at “process” level –vs file/folder–, providing optimal performance, e.g. first decryption of the E-mail subject/headers, and then the core of the E-mail selected.

- User authentication on the mobile device: user-defined PIN code is used to unlock the mobile device after reboot or wake-up.

- PIN code recovery: should a PIN code be forgotten or the mobile device be locked after 3 failed attempts, the IT administrator can transmit a recovery code to the mobile end-user thanks to a unique “master key” stored within the EveryWAN server.

- Automatic configuration backup/restore: the EveryWAN configuration can be stored on a removable storage card enabling an automatic restore of the client, the security module and their specific settings after a hard reset on the mobile device.

Download IDC whitepaper about Windows Mobile Device Management and Security