abylonsoft: abylon SHAREDDRIVE

abylon SHAREDDRIVE

Only abylon ENTERPRISE

and abylon SHAREDDRIVE

The encrypted file clipboard abylon SHAREDDRIVE is shown in the MS File Explorer on the desktop level. The complete integration into the Explorer environment simplify using of the software. The encryption and decryption with the e.g. AES algorithm is done for each file operation automatically in the background. The file-based structure allow the simultaneous access of several users and reduce the backup data transfer volume. The encrypted files can be stored on local or a network computer. Security is increased by masking the file names. As access-key a password, a smart card, a removable media or a CD/DVD can be use to open the SHAREDDRIVE. In companies for the access authorization the use of X.509 certificates (HYBRID-System, PKCS, RSA) are supported.

Features:

Automatic encryption and decryption of files automatically in the background
Encryption with Blowfish (448 bit) or AES-algorithm (256 bit)
Supported secrets (Keys) for access authorizations:
- SYMM-System
  - Password over the keyboard
  - Chipcards (e.g. 'EC MoneyCard' (with chip) or 'Health Insurance Cards')
  - External storage media (e.g. USB-Stick)
  - CDs/DVDs
  - Combination of password and token
  - 4Eye-System
- HYBRID-System
  - X.509 software Certificates
  - Certificates on Smartcard or USB-Token
Perfect integration in the MS File Explorer
Full text search in encrypted files
Storing place of the encrypted files:
- Local computer
- Network computer
Over the network or internet the transfer of the data is always encrypted (Decryption only on the client)
Simple administration by ex and import of the settings (inclusive automatic update from the CTLR-folder an and the UserConfig)
Special software is not necessary on the server
Every file will be stored as an encrypted image file
The original file names are masked with a random numbers
Multi-user-Support: Several users can access one SHAREDDRIVE simultaneously
Marking of opened files
Disk space requirement only depend of the size of the files
Maximum size of the drive only dependent on disk capacity
Access on encrypted CDs and DVDs
Crash Protection: Decrypting only of the needed files and cleaning of the temporary file list after reboot
Only small backup resource needed
Only authorized personal can decrypt files and see the original file name!

Installation of programs are NOT possible!

Window

Name

Field for the SHAREDDRIVE destination.

...

This button open a dialog to select a directory for your SHAREDDRIVE.

Open in Read-only mode

If this option is activated, the SHAREDDRIVE can open in the Read-only modus only. In this case changes are not possible.

This option is only after the creation of SHAREDDRIVE available. Write-protected SHAREDDRIVEs are yellow.

Add / Accept

Create a new SHAREDDRIVE or accepts the changes.

Tutorial

Settings dialog

Open in the settings dialog the site SharedDrive. Here the abylon SHAREDDRIVE can be activated or deactivated.

Default Encryption ALG

On the site Shareddrive settings can be set the encryption algorithm for a new SHAREDRIVE. The access authorization when SYMM-System (for home-user) is recommended using your password or secret (eg, debit card or USB stick) and the HYBRID-System (for companies) by X.509 certificates.

Creating a new SHAREDDRIVE

The creation of a new SHAREDDRIVE made in the settings dialog with the following buttons:

or Add

Following open the Options dialog to change or create a SHAREDDRIVE.

Options for the new SHAREDDRIVE

With ... you select the directory where the encrypted files are stored. This directory can be on the local or a remote machine (UNC path lie). With Add a new SHAREDDRIVE is created and with Save the changes are applied.

A directory must be empty, otherwise it may cause unexpected problems!

Define password

Finally you must enter you password or insert the secrete (SYMM-System) or insert the pin of your certificate (HYBRID-System).

Access

Access to the SHAREDDRIVE done in the File Explorer on the desktop level, or directly on the desktop.

Immediately after installation, you may need to click once F5 to update viewing of the File Explorer or the desktop.

Open

With clicking the desired SHAREDDRIVE will be selected.

Enter password

In case of the SYMM-System, you must enter your password or insert the used secret (eg, debit card or USB stick). In case of the HYBRID-System, you will be prompted for the PIN of your certificate. (ONLY at a high level of security)

Open, Copy, Paste, Rename ...

Now you can use the SHAREDDRIVE as a normal drive. The functions like Open, Copy, Paste or Rename are accessible via the right mouse menu. Of course, drag and drop files can be copied or moved also.

Create a new file

Change in SHAREDDRIVE to the folder where the new file to be created. In the right mouse menu under New file a list of possible file types is displayed. Should you don't find the type of file you want, create a simple text file and rename them.

Edit a file

As usual, the files can be opened with a double click. The file is temporarily decrypted and opened with the appropriate program. Whenever by every saving the encrypted file is updated. This will appear with a status dialog. When closing the file also appears to have an information dialog that the file-monitoring was terminated.
Open files are displayed in the File Explorer with red lettering. In the Status column identifies the user, which the file currently being edited.

F5-Button

Under certain circumstances it may happen that the file view was not updated correctly (eg, gray background). To manually update the display, just press F5 on your keyboard.

Closing / locking of the abylon SHAREDDRIVE

Each SHAREDDRIVE are close with the right mouse button Lock abylon SHAREDDRIVE. Alternatively in the abylon SETTINGS on the site SharedDrive Settings can be define a time after which the SHAREDDRIVE Close automatically. Open files thereby not lost, with saving all changes are encrypted store.

In the company's mode (HYBRID-System) is a certificate required!

abylon CERTMANAGER

Open the abylon CERTMANAGER

Qualifying Certificate

On the left you will find the entry abylon SHAREDDRIVE, under which all created HYBRID-System SHAREDDRIVE are listed. When you select an entry, are displayed on the right side all legitimate certificates. In the case shown has the owner of the certificate 'Thomas Mustermann' access to the abylon SHAREDDRIVE Standard.

Expand access permission to other certificates

Um die Zugriffsberechtigung auf weitere Zertifikate auszudehnen, müssen Sie nur die entsprechenden öffentlichen Zertifikate dem SHAREDDRIVE zuweisen. Dies erfolgt einfach durch Kopieren der Zertifikate in dieses Verzeichnis. Folgen Sie dazu den folgenden Schritten.

In order to extend access rights to other certificates, you must assign only the corresponding public certificates to the SHAREDDRIVE. This is simply done by copying the certificates in this directory. By following the steps below.

Certificates can be inserted both from the local databases from an LDAP server, the abylon FILE PKI or aabylon SMALL PKI

Select and copy of the used certificate

Open the database and select the certificate you want (Certificate 'Abylon_1024' in database 'My'). Click in the right mouse menu the item Copy.

Paste the used certificate

Im entsprechenden SHAREDDRIVE-Ordner kann mit Einfügen das Zertifikat des SHAREDDRIVE hinzugefügt werden.

In the corresponding SHAREDDRIVE the certificate can add with Paste.

Update the key files conclusion

Thus the added certificates actually possess an access authorization, the key files must be updated. You will be prompted to enter the corresponding PIN. Depending on the service provider this dialogue may vary.

Completion

During the next open of the SHAREDDRIVE a list with all legitimate certificates is show in the CERTIFICATE CHECK dialogue. Only if the list is the legitimate certificates in order, you should confirm with Forward. Then you have to re-enter your certificate password.

Benefits

In networks, it may be advantageous to use a abylon SHAREDDRIVE simultaneously with multiple users. The memory directory must be specified as a network drive (UNC path). In case of the HYBRID-System the access permission is managed by assigning the user certificate. In case of the password-based SYMM-System the access permission is managed by sharing the password for all users.

Creation (such as on the server)

Legen Sie wie unter Punkt I. beschrieben ein SHAREDDRIVE an, z. B. auf dem Server. Serverseitig wird die Software abylon SHAREDDRIVE dabei nicht benötigt. Beim HYBRID-System können die Berechtigungen mit Zertifikaten festgelegt werden, wie unter Punkt III. beschreiben.

Create as described in Point I. a new SHAREDDRIVE, for example on the server. On the server side, the software abylon SHAREDDRIVE then not required. How describe in Point III in case of the HYBRID-System the permissions are managed by selecting of certificates.

Importing (eg. on the client)

Öffnen Sie die abylon EINSTELLUNGEN und wechseln auf die Seite SharedDrive Verwaltung. Mit

wird ein Dialog zur Verzeichnisauswahl geöffnet. Wählen Sie hier das Verzeichnis (UNC-Pfad) aus, in dem ein bestehendes bestehenden SHAREDDRIVE gespeichert wurde. Dieses wird auf dem Rechner übernommen ist ist ab sofort verfügbar.

Open the abylon SETTINGS and change to the site SharedDrive Management. With a directory selection dialog will open. Here you can select the folder (UNC path), where an existing SHAREDDRIVE was stored. This is taken on the computer is is now available.

In case of the HYBRID-System SHAREDDRIVEs all public keys of authorized persons (for encryption), and the private key of the local user (decryption) must be available on the client system. To perform this, abylonsoft offer a abylon SMALL PKI and abylon FILE PKI .

abylon SHAREDDRIVE

Features:

Window

Tutorial

I. Activating and creating an abylon SHAREDDRIVE

II. Using the abylon SHAREDDRIVE

III. Set the access permissions of the abylon SHAREDDRIVE (HYBRID-System) with certificates

IV. Import an abylon SHAREDDRIVE to use with multiple user

See also