Components that constitute the CipherMe ocean of encrypted information items are:
- network protocol
-
CipherMe network protocol is the means for exchanges between user nodes and servers that store encrypted information.
The protocol is a standard Hyper Text Transfer Protocol, where all the functionality is embedded in the payload of the HTTP packet.
The protocol is stateless, where each client-server exchange is a complete stand-alone transaction.
To overcome delays from network turn-round times several operations can be executed through a single transaction.
All packets are signed by user private key.
- network servers
-
There can be any number of server installations offering encrypted information storage services - from large provider,
administration or business installations, to services provided from a single home computer.
Each information item, prior to being sent to its server, is encrypted on user access terminal,
using an individually generated symmetric key.
The technology supports an open variety of encryption algorithms and key lengths.
- user access nodes
-
Encrypted information can be brought into and decrypted on any network-capable device,
provided it is made aware of CipherMe protocol and allows the introduction of user cryptographic keys.
These can be standard PCs, laptops, tablets and smartphones or public access terminals, like kiosks or even ATMs.
- user key-carrying access tokens
-
User access, signing of transaction packets, information encryption/decryption,
licensing of access by third parties is exercised through user asymmetric cryptography key pair.
These keys can be carried on a variety of media: cryptographic cards, including special and banking cards,
cryptographic tokens, as files on portable media and even files stored on a network service.
When stored as files, private key component is encrypted using Password Based Encryption technology.
- publicly available specifications
-
CipherMe technology is an open specification: its protocol and its object formats.
Like in all systems, standarisation of information is the key to inter-system compatibility.
The only specification, outwidth of the core CipherMe functionality,
and which is catered for by the technology, is the format of a digital document
- the most frequently managed object by CipherMe applications.
- network-based applications
-
The system separates user information stored on CipherMe servers from applications used to process that information.
These two meet only at the user access node, where user keys fetch and decrypt the required information items
from various locations and present these items to the selected application.
- business models
-
The technology supports a number of business models,
both in the area of information storage and in provision of network-based applications.
These vary from pay-per-use pre-paid pulse models for individuals to open-ended licences for volume-hungry installations.