Utimaco Safeware AG Securing Your eAssets Alessandro Zuech

[Utimaco Safeware AG] [Securing Your e-Assets] Alessandro Zuech Product Manager Computerlinks Italia

[Corporate Overview] Utimaco Safeware AG, 9/15/2020 Our History 1983 Foundation of uti-maco software 1994 Transformation into Utimaco Safeware AG 1999 IPO on Frankfurt Stock Exchange 1999 Acquisition of Krypto. Kom 2000 TCPA Membership (now TCG Contributor) 2001 Subsidiary in the US 2001 Establishing of indirect sales program 2002 Restructuring 2003 Major capital increase together with Investcorp 2004 First IBM TPM enabled products 2

[Corporate Overview] Facts n Turnover: Euro 26, 9 mio. in 2003/2004 Employees: 210 worldwide* Headquarter: Oberursel near Frankfurt(Main) n Business units: n n ðPersonal Device Security Product business Security solutions for PCs, Notebooks, PDAs, Removable Medias and Terminal Server environments Utimaco Safeware AG, 9/15/2020 ðTransaction Security § Authentication § Encryption § Rights- Mgmt Project business Focus on project oriented business with innovative security solutions for e-business and e-government processes on § Sign - Verify the basis of own technologies. (central e-mail security § Encrypt -Decrypt § PKI - Infrastructure services, PKI-enabled applications, HSM). § Time Stamping § HS - Modules * August 2004 3

[Company Overview] Utimaco´s Worldwide Presence Own subsidiaries International Distributors Development Sites US/Boston Israel Egypt JV Hong. Kong Saudi Arabia Brasil Taiwan Malasyia Singapore Argentinia Chile Utimaco Safeware AG, 9/15/2020 South Afria Australia Detailed list: www. utimaco. com 4

[Work goes Mobile] Mobile Computing Utimaco Safeware AG, 9/15/2020 Equipment of business men (Mobilen Devices) n % 97% Mobile phone: ? n Laptop: ? % 82% n PDA: ? % 37% http: //www. vnunet. com/news/1155066 (11. May 2004) 5

[Work goes Mobile] Mobile Computing Advantages n Increased productivity (independend from where you are) n Customer satisfaction n Cost-saving n High flexibility n Global reachability n Utimaco Safeware AG, 9/15/2020 n confidential Enterprise All information always with you Bridges to LAN, WLAN, Bluetooth, Ir. DA . . External hard disks Memory sticks USB-Tokens Removable media CD, DVD Media card readers 6

[Work goes Mobile] Mobile Computing [Level of IT-Security? ] 73% of companies do not have specific. Security Policies for mobile devices. [Security Policy? ] (Gartner Group, 2003) confidential Enterprise 256 MB Memory Stick 17. 000 pages (Word Format, 15 KByte per page) Security Policy Utimaco Safeware AG, 9/15/2020 Bridges to LAN, WLAN, Bluetooth, Ir. DA External hard disks Memory sticks USB-Tokens Removable media CD, DVD Media card readers 7

[IT-Security] Enterprise [Yesterday] IT-Security Authentication n UID/PW Token, PKI based SSO Confidentiality n n Client, Server Datatransfer Integrity confidential n n Data Systemconfiguration Security Management n Utimaco Safeware AG, 9/15/2020 n Emergency Tools (PW reset, …) Auditing Availability n n Branch Intrusion Prevention Firewall/Virus Liability n Digital Signatures 8

[IT-Security] Enterprise [Yesterday] [Today] IT-Security The mobile market in year 2003: confidential Utimaco Safeware AG, 9/15/2020 Mobile User n 36 mio. notebooks sold worldwide n 53% growth rate for Germany n 30% growth rate for Western Europe n Enormous potential in replacement investment desktops notebooks Source: Dataquest Q 1/2003 http: //www. heise. de/newsticker/data/jow-05. 09. 03 -000 Branch . . . the new challenge! 9

[IT-Security] Enterprise [Yesterday] IT-Security [Today] IT-Security + Mobile Security confidential Utimaco Safeware AG, 9/15/2020 Mobile User Branch Mobile User - Notebook Security Concept - PDA - Authentication - Removable media -- Encryption - Data transfer - Systemintegrity -- Security Mgmt - . . . the new challenge! 10

[Personal Device Security] Overview Safe. Guard® for Mobile Security Authentication - To System - Security Policy - Central Admin - Support - To Safe. Guard Crypto-Appl. - Token optional - Certificate based (PKI) - Single Sign On Data Encryption - Entire hard disk - Data directories - Mobile data medium (USB Sticks. . . ) - Single files - E-mail attachments - Backup/Recovery - Operating system, Systemconfig. - Temporary files Utimaco Safeware AG, 9/15/2020 Rights-Management (Systemintegity) - Appl. Specific Access Rights - Plug&Play Device Mgmt. - Removable Media Mmgt. - Internet Filter System-Management - Security-/Distribution Mgmt. - Emergeny Procedure (PW, - Auditing Key Recovery) 11

[Personal Device Security] Safe. Guard® for Mobile Security Authentication Overview - To System ® Safe. Guard Easy Utimaco Safeware AG, 9/15/2020 - Certificate based (PKI) ® Container encryption (“virtual disk”) for PC’s and removable media's n - Single Sign On Main Task: Data Encryption Confidentiality - Entire hard disk - Data directories ® Multi-user encryption systems for PC, Network & Server based Computing n ® Safe. Guard Private. Crypto Encryption to protect files and e-mail attachments n - Mobile data medium (USB Sticks. . . ) - Single files - E-mail attachments - Backup/Recovery - Operating system, Systemconfig. - Temporary files Rights-Management (Systemintegity) ® C O N C E P T - Token optional Safe. Guard Private. Disk Safe. Guard LAN Crypt S E C U R I T Y - To Safe. Guard Crypto-Appl. Full disk encryption & access control n Crypto – Module M O D U L A R Safe. Guard PDA Authentication, integrity protection and encryption for PDA‘s n ® Safe. Guard Advanced Security n - Enhanced Authentication - Enhanced Rights- Mgmt. to increase System Stabity/Integrity for PC Server, Server based Computing - Appl. Specific Access Rights - Plug&Play Device Mgmt. - Removable Media Mmgt. - Internet Filter System-Management - Security-/Distribution Mgmt. - Emergeny Procedure (PW, - Auditing Key Recovery) 12

[Personal Device Security] Overview ® Safe. Guard Easy M O D U L A R Full disk encryption & access control n ® Safe. Guard Private Disk Container encryption (“virtual disk”) for PC’s and removable media's n ® Safe. Guard LAN Crypt S E C U R I T Y Multi-user encryption systems for PC, Network & Server based Computing n ® Safe. Guard Private. Crypto Encryption to protect files and e-mail attachments n Utimaco Safeware AG, 9/15/2020 - To System - To Safe. Guard Crypto-Appl. - Token optional - Certificate based (PKI) - Single Sign On Data Encryption - Entire hard disk - Data directories - Mobile data medium (USB Sticks. . . ) - Single files - E-mail attachments - Backup/Recovery - Operating system, Systemconfig. - Temporary files Rights-Management (Systemintegity) ® C O N C E P T Safe. Guard® for Mobile Security Authentication Safe. Guard PDA Authentication and encryption of file, container, e-mails to protect PDA‘s n ® Safe. Guard Advanced Security n - Enhanced Authentication - Enhanced Rights- Mgmt. to increase System Stabity/Integrity for PC Server, Server based Computing - Appl. Specific Access Rights - Plug&Play Device Mgmt. - Removable Media Mmgt. - Internet Filter System-Management - Security-/Distribution Mgmt. - Emergeny Procedure (PW, - Auditing Key Recovery) 13

[Personal Device Security] Overview Electronic Fortress M O D U L A R ® Safe. Guard Easy ® Safe. Guard Private Disk - Token optional SAL Container encryption (“virtual disk”) for PC’s and removable media's n ® Utimaco Safeware AG, 9/15/2020 - Data directories - Mobile data medium (USB Sticks. . . ) - Single files - E-mail attachments - Backup/Recovery ® - Operating system, Systemconfig. Encryption to protect files and e-mail attachments - Temporary files Rights-Management (Systemintegity) ® C O N C E P T - Single Sign On - Entire hard disk Option Safe. Guard Private. Crypto n - Certificate based (PKI) Data Encryption Multi-user encryption systems for PC, Network & Server based Computing n - To System - To Safe. Guard Crypto-Appl. Full disk encryption & access control n Safe. Guard LAN Crypt S E C U R I T Y PBA Safe. Guard® for Mobile Security Authentication Safe. Guard PDA - Appl. Specific Access Rights - Plug&Play Device Mgmt. Authentication and encryption of file, container, e-mails to protect PDA‘s n - Removable Media Mmgt. - Internet Filter ® Safe. Guard Advanced Security n - Enhanced Authentication - Enhanced Rights- Mgmt. to increase System Stabity/Integrity for PC Server, Server based Computing System-Management - Security-/Distribution Mgmt. - Emergeny Procedure (PW, limited - Auditing Key Recovery) 14

[Personal Device Security] Overview - To System Safe. Guard® Easy M O D Electronic U Safe L A R S E C U R I T Y Full disk encryption & access control n Safe. Guard® Private. Disk Container encryption (“virtual disk”) for PC’s and removable media's n Safe. Guard® LAN Crypt Multi-user encryption systems for PC, Network & Server based Computing n Safe. Guard® Private. Crypto Encryption to protect files and e-mail attachments n Utimaco Safeware AG, 9/15/2020 - To Safe. Guard Crypto-Appl. Option - Token optional - Certificate based (PKI) - Single Sign On Data Encryption - Entire hard disk - Data directories - Mobile data medium (USB Sticks. . . ) - Single files - E-mail attachments - Backup/Recovery - Operating system, Systemconfig. - Temporary files Rights-Management (Systemintegity) ® C O N C E P T Safe. Guard® for Mobile Security Authentication Safe. Guard PDA Authentication and encryption of file, container, e-mails to protect PDA‘s n - Appl. Specific Access Rights - Plug&Play Device Mgmt. - Removable Media Mmgt. - Internet Filter ® Safe. Guard Advanced Security n - Enhanced Authentication - Enhanced Rights- Mgmt. to increase System Stabity/Integrity for PC Server, Server based Computing System-Management - Security-/Distribution Mgmt. - Emergeny Procedure (PW, - Auditing Key Recovery) 15

[Personal Device Security] Overview - To System ® Safe. Guard Easy M O D U L A R Electronic S Safe E C U R I T Y Full disk encryption & access control n - To Safe. Guard Crypto-Appl. Option - Single Sign On Container encryption (“virtual disk”) for PC’s and removable media's Data Encryption - Entire hard disk - Data directories ® Safe. Guard LAN Crypt - Mobile data medium (USB Sticks. . . ) Multi-user encryption systems for PC, Network & Server based Computing n - Single files - E-mail attachments - Backup/Recovery ® Safe. Guard Private. Crypto no OS Encryption to protect files and e-mail attachments n Utimaco Safeware AG, 9/15/2020 - Operating system, Systemconfig. - Temporary files Rights-Management (Systemintegity) ® C O N C E P T - Token optional - Certificate based (PKI) ® Safe. Guard Private Disk n Safe. Guard® for Mobile Security Authentication Safe. Guard PDA - Appl. Specific Access Rights - Plug&Play Device Mgmt. Authentication and encryption of file, container, e-mails to protect PDA‘s n - Removable Media Mmgt. - Internet Filter ® Safe. Guard Advanced Security n - Enhanced Authentication - Enhanced Rights- Mgmt. to increase System Stabity/Integrity for PC Server, Server based Computing System-Management - Security-/Distribution Mgmt. - Emergeny Procedure (PW, limited - Auditing Key Recovery) 16

[Personal Device Security] Overview - To System ® Safe. Guard Easy M O D U L A R - To Safe. Guard Crypto-Appl. Full disk encryption & access control n - Token optional - Certificate based (PKI) ® Safe. Guard Private Disk - Single Sign On Container encryption (“virtual disk”) for PC’s and removable media's n Data Encryption - Entire hard disk - Data directories ® Safe. Guard LAN Crypt S E C U Electronic R Safe I T Y - Mobile data medium (USB Sticks. . . ) Multi-user encryption systems for PC, Network & Server based Computing n - Single files - E-mail attachments - Backup/Recovery medium ® Safe. Guard Private. Crypto - Operating system, Systemconfig. Encryption to protect files and e-mail attachments n - Temporary files Rights-Management (Systemintegity) Utimaco Safeware AG, 9/15/2020 ® C O N C E P T Safe. Guard® for Mobile Security Authentication Safe. Guard PDA - Appl. Specific Access Rights - Plug&Play Device Mgmt. Authentication and encryption of file, container, e-mails to protect PDA‘s n - Removable Media Mmgt. - Internet Filter ® Safe. Guard Advanced Security n - Enhanced Authentication - Enhanced Rights- Mgmt. to increase System Stabity/Integrity for PC Server, Server based Computing System-Management - Security-/Distribution Mgmt. - Emergeny Procedure (PW, limited - Auditing Key Recovery) 17

[Personal Device Security] Overview - To System ® Safe. Guard Easy M O D U L A R - To Safe. Guard Crypto-Appl. Full disk encryption & access control n ® Safe. Guard Private Disk - Token optional VPN Container encryption (“virtual disk”) for PC’s and removable media's n Multi-user encryption systems for PC, Network & Server based Computing - Data directories - Mobile data medium (USB Sticks. . . ) no PIM - Backup/Recovery ® - Operating system, Systemconfig. Encryption to protect files and e-mail attachments - Temporary files Rights-Management (Systemintegity) Utimaco Safeware AG, 9/15/2020 ® Electronic C Safe O N C E P T - Single files - E-mail attachments Safe. Guard Private. Crypto n - Single Sign On - Entire hard disk ® n - Certificate based (PKI) Data Encryption Safe. Guard LAN Crypt S E C U R I T Y Safe. Guard® for Mobile Security Authentication Safe. Guard PDA - Appl. Specific Access Rights - Plug&Play Device Mgmt. Authentication, integrity protection and encryption for PDA‘s n - Removable Media Mmgt. - Internet Filter ® Safe. Guard Advanced Security n - Enhanced Authentication - Enhanced Rights- Mgmt. to increase System Stabity/Integrity for PC Server, Server based Computing System-Management - Security-/Distribution Mgmt. - Emergeny Procedure (PW, limited - Auditing Key Recovery) 18

[Personal Device Security] Overview ® Safe. Guard Easy M O D U L A R Full disk encryption & access control n ® Safe. Guard Private Disk Container encryption (“virtual disk”) for PC’s and removable media's n ® Safe. Guard LAN Crypt S E C U R I T Y Multi-user encryption systems for PC, Network & Server based Computing n ® Safe. Guard Private. Crypto Encryption to protect files and e-mail attachments n Utimaco Safeware AG, 9/15/2020 - To System - To Safe. Guard Crypto-Appl. - Token optional - Certificate based (PKI) - Single Sign On Data Encryption - Entire hard disk - Data directories - Mobile data medium (USB Sticks. . . ) - Single files - E-mail attachments - Backup/Recovery - Operating system, Systemconfig. - Temporary files Rights-Management (Systemintegity) ® C O N C E P T Safe. Guard® for Mobile Security Authentication Safe. Guard PDA Authentication and encryption of file, container, e-mails to protect PDA‘s n ® Safe. Guard Advanced Security n - Enhanced Authentication - Enhanced Rights- Mgmt. to increase System Stabity/Integrity for PC Server, Server based Computing - Appl. Specific Access Rights - Plug&Play Device Mgmt. - Removable Media Mmgt. - Internet Filter System-Management - Security-/Distribution Mgmt. - Emergeny Procedure (PW, - Auditing Key Recovery) 19

[Personal Device Security] Overview Safe. Guard® for Mobile Security Enterprise Guaranteed Security for workplace environment ® Safe. Guard Easy ® Safe. Guard LAN Crypt ® Safe. Guard Private. Disk ® Safe. Guard Private. Crypto Positioning Working together ® Utimaco Safeware AG, 9/15/2020 Safe. Guard PDA ® Safe. Guard Advanced Security Central Admin, - Distribution - Security Mgmt. 20

[Personal Device Security] Safe. Guard® for Mobile Security Solution Portfolio Enterprise Guaranteed Security for workplace environment ® Crypto – Modul Safe. Guard Easy Notebook, PC, PDA Removable Media User-ID/PW (PBA) Data Confidentiality A Network (Server) Internet Entire Hard disk Safe. Guard LAN Crypt ® A File/Directory Level for Multi-User ® A Container (Virtual Disk) ® A Files, E-Mail Attachments ® A Files, Container, E-Mail Attachments ® A Safe. Guard Private. Disk Safe. Guard Private. Crypto Safe. Guard PDA Utimaco Safeware AG, 9/15/2020 Authentication Safe. Guard Advanced Security Interoperability - Rights- Management (Systemstability, Integrity) - Enforced Security Policy SSO Central Admin, - Distribution - Security Mgmt. 21

[Selection of References] n Allianz - AGIS n Cartier Capgemini DBV-Winterthur (insurance) Deutsche Post EADS Airbus KPN Pricewaterhouse. Coopers Reuters R&V Versicherung Statoil n Syngenta n n n n n Safe. Guard® for Mobile Security Utimaco Safeware AG, 9/15/2020 (agriculture protection by Novartis & Zeneca) n n UBS Several ministries and financial organisations world-wide incl. “Canadian Revenue Agency” More than 2 mio licenses of Safe. Guard® out in the field (worldwide) 22

Safe. Guard® for Mobile Security Face to Face Utimaco Safeware AG, 9/15/2020 [Questions - Discussion] 23

[Thank You] www. utimaco. com [Securing Your e-Assets] Safe. Guard® for Mobile Security