Information Rights Management

Seclore Technology (incubated and promoted by IIT, Bombay) is a leading provider of information security solutions in the areas of information usage control, information rights management (IRM) and secure outsourcing. Our expertise lies in protection of data post distribution irrespective of its location or mode of transfer.

Seclore's products FileSecure and InfoSource help mitigate the risk arising out of information breaches and regulatory non-compliance whilst enhancing collaboration. This is done by providing ubiquitous technology for information control within and outside of the enterprise which seamlessly works with existing infrastructure. It is easy to deploy and use and comes with pay-as-you-use pricing.

Some of the largest financial and engineering companies use Seclore's technology to secure data that is used internally or provided to a vendor for outsourced processes. Its clients are leading banks, insurance firms, engineering enterprises, IT and technology companies, among others. www.seclore.com

Seclore FileSecure

The Problem

Confidential information is often contained in documents, which are shared within and outside the enterprise for various business processes. Though sharing of the information with specific people is required, by virtue of doing so, control is lost on the usage of the information. The recipients are often free to copy, print, edit, forward, to other people, etc, which pose a risk to the confidentiality of the document and the information within it.

Traditional information security systems focus on preventing unauthorized distribution of information by introducing "gates" which need to be crossed, and rules and policies which govern these gates. These gates also become a hindrance to collaboration for business use.

The Solution

Seclore FileSecure enables enterprises to mitigate the risks of information breaches by allowing users and enterprises to distribute information but retain control of the information irrespective of its location (within or outside the enterprise), or method of transmission (email, CDs, web upload, USB, DMS, …).

Each document can be manually or automatically assigned a "policy" which defines

1. WHO can use the document (people, groups, … )
2. WHAT can each person do with the document (read, edit, print, forward, ...)
3. WHEN can each person use the document (dates, time-spans, ...)
4. WHERE can each person use it from (in the office, home, …)

The policies are implemented each time any person accesses the document and are persistent with the document itself. This implies that policies are implemented even when documents travel outside of the enterprise to business partners, vendors or customers.

The policies are also dynamic i.e. they can be changed post distribution. This implies that documents shared earlier with "trusted" entities can be remotely controlled (rendered unreadable, unprintable, etc.) if the business relationship changes. Documents can also be programmed for self destruction based on time.

Seclore FileSecure also maintains a complete audit trail of all the authorized uses and unauthorized attempts to use the document which is centrally captured. This helps enterprises monitor usage and adhere to compliance frameworks like ISO, Sarbanes Oxley, PCI and HIPAA.

Product Features & Benefits:

1. Support for most dominant document formats, including MS Office, emails, PDF, text, images, engineering drawing, Open office
2. Granular rights which can control WHO, WHAT, WHEN and WHERE of usage
3. Support for "Offline" file usage which does not need connectivity
4. Prevention of all screen grabbing tools including screen sharing of protected documents
5. Support for user authentication using any LDAP system, like Microsoft AD
6. Support for user authentication using non-LDAP systems, e.g. online banking systems, customer portals, vendor portals, ERP systems, etc.
7. Identity federation from multiple user authentication systems
8. Protect documents within and outside of the enterprise
9. Support for multi factor authentication
10. Manual (user driven) and automated (user and admin driven) methods of protection
11. Availability of integration APIs (web services) for integration with existing systems like storage, document management, content filtering, DLP, and search
12. Military grade encryption
13. Automated patch and upgrade management
14. Full audit of authorized activities and unauthorized attempts on the document, within and outside the enterprise
15. Auditing of all administrator activities with maker-checker
16. Template based credentials
17. Custom reporting on user activities
18. Web based administration
19. Support for virtualized environments
20. Central Server maintenance, distributed User administration
21. Easy Installation
22. High availability

Clients:

Seclore has leading insurance companies, banks, financial firms, engineering companies and educational bodies as its clients.

• ICICI Bank
• Kotak Mahindra Bank
• HDFC Bank
• Reliance Capital
• Reliance Consumer Finance
• Kotak Securities
• ICFAI University
• HDFC Standard Life Insurance
• Reliance Life Insurance
• UHDE India
• L&T Infotech
• Pidilite Industries
• BLA Industries
• Bajaj Allianz General Insurance
• Bajaj Allianz Life
• Denso Malaysia