Slingmail International Presentation Bmit

Slingmail is a service that gives you the ability to communicate with other’s in confidence . It is an encryption software for secured Blackberry to Blackberry email messaging

SlingMail has been providing this high-level encryption of data for 7 years since 2002

The markets covered by SlingMail to-date are North America, Europe, Middle East, Japan and Russia. Coming to South East Asia now

Slingmail uses two levels of strong encryption for sending and receiving mail

Security is further enhanced as communication is within a closed system , hence, minimizing attacks. It is volatile as data is purged, so we don’t store your data. The keys are constantly changed and servers are in a safe jurisdiction

Slingmail is built on solid footing with our own carrier

Slingmail is specially developed for influential world organizations, governments, special forces, research institutions, telcos, broadcasting, financial institutions, MNCs, high net worth individuals and celebrities

Current Situation

Security

By Humphrey Cheung

TG Daily

Thursday, June 21, 2007 10:04

Paris (France) – French government officials are ditching their Blackberry devices for fears of American eavesdropping. A government advisory, which is being sent to all French ministries, claims that the wireless email messages can be intercepted because they pass through servers in Canada, United States and the United Kingdom. Research in Motion adamantly assures the French that the emails are secure from everyone, even from employees at RIM. The French believe the emails could be intercepted and read by the U.S. National Security Agency, but RIM says the emails are heavily encrypted by 256-bit strength AES (Advanced Encryption Standard). The sender and receiver addresses are also encrypted. The advisory was written by the French secretary-general for national defense and first made its rounds two years ago, but has since been updated and re-circulated.

15 May 2008, 0810 hrs IST, Rashmi Pratap, TNN

The Economic Times

MUMBAI : In a major change of stance, Canada-based Research In Motion (RIM) may allow the Indian government to intercept non-corporate emails sent over BlackBerrys. This is expected to solve the row between the Department of Telecom (DoT) and RIM to a large extent, since the government’s security concerns pertain more to emails from individual users than enterprise customers. At the core of the issue is the data encryption technology used in BlackBerrys. BlackBerry uses a very high level of encryption — at 256 bits — while sending data. BlackBerry scrambles messages before sending and unscrambles them at the receiver’s BlackBerry. Owing to security concerns, the government wants to be able to intercept and decode the data. However, the government’s decryption software can decode messages encrypted only up to 40 bits. India wants RIM to either hand over the decryption keys or reduce encryption to 40 bits. According to officials close to the development, Canadian High Commissioner David Malone and RIM officials met telecom secretary Siddhartha Behura on May 7 . “It was explained by RIM that it should be possible for the government to monitor emails to non-business enterprise customers,” sources told ET. “ RIM is considering giving access to individual users’ email to the government . Details on this will be provided in two or three weeks,” sources said.

Solution Features two strong levels of encryption, purging of data, constant changing of keys, servers in a secure environment and a closed system

Features

Sender’s of Email

Slingmail senders email is encrypted with 2 full levels of AES256; ie (AES256 + AES256 = 512 bits encryption)

In cryptography, the Advanced Encryption Standard ( AES ) is an encryption standard adopted by the U.S. government.

In June 2003, the US Government announced that AES may be used to protect classified information

Receiver’s of Email

4096 bit public / private key security

Email messages sent from the senders Blackberry is encrypted at 512 bit encryption.

Messages arriving at Slingmail’s server is further encrypted at 4096 bit encryption level

Messages are then forwarded and received by the receivers Blackberry at 4096 bit security level

Only persons authorized to receive from the sender will have the private key to decrypt the messages

Live certificate revocation

Our own certificate authority

We do not keep private keys on the system, as your private key is deleted once it is delivered to you

All keys used to encrypt emails have a short lifetime . Keys are changed every 20 days

5. Servers are located in a territory not subject to legislation that allow govts unprecedented access to your communications

6. Data is purged from the servers every 60 mins

7. Emails in your in box are purged every 10 days

8. All this security measures is then further protected in a tightly controlled system; ie a closed system

Benefits

By not keeping your private key and changing it frequently, Slingmail and any other party cannot recover your encrypted mail

Based in a jurisdiction not subject to legislation to keep or release data, hence, w e do not keep any records or communications sent on our systems. You will never need to worry that someone will somehow get them years from now

By purging data on our server every 60 mins , hence, we cannot recover encrypted data at all, EVER

4) Every single computer system is subject to attack. With a closed system, we reduce the "attack surface" of our product down to the minimum.

Secondly, we have a better ability for aggressive and intelligent monitoring to discover "untoward activities".

Hence, this means we keep a good eye on it, as well as be aggressive in protecting it.

Systems that attempt to be everything to everyone open themselves up to everyone.

WE DO NOT

*Please refer to Slingmail Asia User License Agreement Server is only a gateway Acts only as a transporter Server decrypts message to 4096 bits

Wireless email

Device need to have GPRS Service

If use local Telco service to activate device, need to make sure have data service’s with RIM/Blackberry

The BlackBerry Enterprise Server and the BlackBerry Device Software support a Transcoder API. This API permits third-party application developers to create encoding schemes that encrypt, convert, or otherwise change the format of data, and apply an encoding scheme to BlackBerry device data using transcoder application code. The third-party encoding scheme prepends a transcoder ID to the data that it encodes. The BlackBerry Enterprise Solution then encrypts the transcoder-encoded data using standard BlackBerry encryption. The BlackBerry Enterprise Solution permits only third-party encoding schemes that the RIM signing authority system has digitally signed using the RIM Cryptographic API public key to access the Transcoder API to create the transcoder application code. To apply the third-party encoding scheme, the BlackBerry device must be running corresponding transcoder application code. Third-party application developers can use the Transcoder API to add cryptographic components that the RIM Cryptographic API does not support by default to their third-party encoding schemes. The BlackBerry Enterprise Solution applies the third-party encoding schemes to any outgoing data to which standard BlackBerry encryption applies. The Transcoder API supports use of all the cryptography that the RIM Cryptographic API supports. If the BlackBerry Enterprise Server administrator allows third-party applications to use the Transcoder API on the BlackBerry device, those applications, if not functioning correctly, might impact the security, usability and performance of the BlackBerry Enterprise Solution, and might cause loss of BlackBerry device data. To use the third-party encoding scheme, the BlackBerry Enterprise Server administrator must use the Security Transcoder Cod File Hashes IT policy rule to specify the .cod file for the third-party encoding scheme that the BlackBerry device permits to register as a transcoder. For more information about using the Security Transcoder Cod File Hashes IT policy rule, see the Policy Reference Guide.

In every country there are groups of individuals, government agencies and companies who require the highest level of security. Not just physical security ,but also for transfer of data. Any leak in its transfer could lead to devastating consequences, eg leakages of highly sensitive information, such as, the company’s strategic marketing plans or the results of a break-through product that could potentially cost the company it’s positioning and result in heavy financial losses, etc