Application Level Encryption

Flash/Video Get nCipher Podcast eweek interviews nCipher Product Data Sheets nCipher Product Summary

Encryption is the optimal means of securing data and encrypting at the application level provides the richest context for making decisions regarding which data to encrypt and more importantly which users to authorize to decrypt data.  Unlike encryption at the storage or file system level, encryption at the application level can take advantage of knowledge about individual users and specific data types and categories of documents in use.  Application level encryption can provide laser-like security measures that satisfy specific compliance requirements without the need to apply broad-brush encryption that may impact performance unnecessarily.

However application level encryption can present its own challenges as developers seek to modify existing applications to support encryption or write new application code and in either case support the range of key management tasks that are required to control and operationalize the use of encryption.

Easy Integration
nCipher hardware security modules (HSMs) not only provide a secure, tamper-resistant environment for securely performing encryption functions, they also support a wide range of industry standard cryptographic APIs and all common operating systems.  Through the use of nCipher developer toolkits application developers can simplify and accelerate the integration process. 

Cryptographic Acceleration
The use of encryption often raises concerns over performance and to help overcome this issue nCipher cryptographic platforms incorporate dedicated acceleration hardware.

Localized key management
nCipher cryptographic platforms all feature FIPS 140-2 validated key management capabilities for locally managing keys and policies associated with application level encryption.  The nCipher Security World key management framework supports robust key replication and recovery functionality.

Centralized key management
The keyAuthority product provides automated and centralized management of keys throughout their lifecycle, addressing the most challenging aspect of encryption management across large scale deployments as part of an enterprise-wide approach to key management. Read more information about keyAuthority here.

Professional services
In recognition of the unique challenges associated with directly integrating encryption and other cryptographic operations within new or existing applications, nCipher offers a variety of professional services that include consultancy, developer support and customer engineering services.