|
virtualArchive
virtualArchive provides a pricing model that makes budgeting the cost
of archiving documents easy. You pay a single fee to archive each document
for a specific term.
Key Benefits
 | The "postage stamp" pricing model makes budgeting easy |
 | Each document is automatically destroyed when the term expires |
 | Documents can have their life span extended for a renewal fee |
 | Powerful document cataloging indexes are available for rapid
searches |
 | The virtualArchive can be incorporated into your software |
 | High end security can optionally be provided using SafeNet's iKey
USB technologies |
Capabilities
Security for the virtualArchive is managed as an extension of the
virtualTapedrive. The storage client software is loaded at the from a redistributable installation program, included with the
virtualArchive software development kit (SDK).
A pair of iKeys are programmed using the ClientManager program provided
with the SDK. This writes a PIN access code into the iKeys which is used
to activate the storage client software. The ClientManager also configures
a software access code that your application will use to manage the local
storage client.
The storage client software installs the iKey drivers, the vtdClient.exe
(the virtualTapedrive storage client), and the vtdClient.dll. The
vtdClient.dll is used by your application to connect to the vtdClient.exe
through a local loop back port.
After the installation, the ClientSetup program enters
the file encryption code and register the computer with the storage
service.
To connect to the storage service your application passes the access code
for that client to the vtdClient.dll, which creates a message digitally
signed with the access code. The vtdClient.exe only accepts service
requests for clients that have a storage account. The presence of a
vtdClient.dll will not compromise the security of any other client.
The vtdClient.exe connects to the storage service through a 160 bit
encrypted, secure channel and waits for the storage service to either
accept or reject access. The signature stored on the storage service is
signed against the message. If the signature comparison is valid, access
is granted.
|