E-MAIL SECURITY SYSTEM
E-MAIL SECURITY SYSTEM is developed for the Danish municipalities and it is sold to them through the Danish company KMD. Therefore, the solution requires adjustment and further development before it is ready for implementation in your organization. We will begin this development if your organization is interested in using E-MAIL SECURITY SYSTEM.
When an organization wants to communicate electronically with other organizations or external people a need for the following emerges:
- Being able to send and receive sensitive information
- Being able to trust that the received information is actually what the sender originally sent off.
- Being able to send information that the recipient can trust is from the organization.
All these needs can be fulfilled by using digital signatures and encryption in connection with sending an e-mail. Digital signatures identify the sender of the e-mail and ensure that it can be detected if the context of the e-mail has been tampered with while on its way to the recipient. Encryption ensures that only the intended recipient of the e-mail can actually read the context.
Due to the way in which digital signatures are typically implemented, the above provides a number of practical challenges, among these are:
- Key history is necessary when decrypting old encrypted data.
- The distribution of digital signatures for all of the organization's employees can be difficult.
- Use of digital signatures can cause problems for people who are not used to IT and in any case, it requires a rather thorough knowledge of the Public Key Infrastructure concepts and what they mean, if the safety of using digital signatures is to remain on a high level.
- Securing evidence concerning the validity of signatures at the time of the receipt of signed data.
- Securing evidence concerning the validity of signatures at the time of the dispatch of signed data.
By centralizing the use of digital signatures to one IT-system, which validates signatures automatically, decrypt encrypted messages, and sign/encrypt relevant messages, you can overcome most of these practical problems. Even though centralizing the digital signature seems ‘reversed' on the surface considering the original ideas behind the digital signature, it makes sense since an organization's use of the digital signature is more complex than when used by individuals.Overall, the functionality in E-MAIL SECURITY can be divided into four main areas:
- Incoming e-mails that are signed
- Incoming e-mails that are encrypted
- Outgoing e-mails that are signed
- Outgoing e-mails that are encrypted.
