Iron Mountain LiveVault Data Security
Data Security and Site Authenticity
Growing numbers of businesses are recognizing the value and convenience of using Internet-based online backup and electronic vaulting for offline data archiving and disaster recovery. Yet, many have lingering concerns about data security, especially transmitting proprietary, confidential data over the internet, which is inherently public. If you are a Network Administrator, CIO, or other IT professional considering Iron Mountain LiveVault Service™ Backup and Recovery Service, you may be wondering:
- How secure is my data during transmission over the Internet
- How can I be assured that my data is protected from being viewed or stolen by unauthorized users or compromised by hackers?
Such concerns are justified, and Iron Mountain LiveVault Service™ addresses them with state-of-the-art security technology similar to that which major financial institutions use to protect their Internet transactions. In particular, Iron Mountain LiveVault Service™ combines password-protected SSL-level web access, electronic key technology, advanced encryption techniques, and industry standard digital certificates to produce a secure passage for data and guarantee the authenticity of sites sending or receiving data over the Internet.
Secure Access to Iron Mountain LiveVault Web Management Portal
When accessing Iron Mountain LiveVault Web Management Portal web management portal, your connection is secure with Secure Socket Layer (SSL) and login protection. To ensure the maximum level of security using SSL, you must use a browser that supports 128-bit encryption. This is the same level of security that is used today for secure online transactions with banks and e-commerce sites. It is also the same level of security that most business-to-business sites use.
Establishing an SSL connection ensures that you are connected to the web page you intended to connect to. You will be prompted to enter a username and password so that Iron Mountain LiveVault Service™ can verify that you are who you say you are. The SSL connection is like a secure tunnel with two-way authentication. You are assured of the identity of the site you are connected to, and Iron Mountain LiveVault Service™ knows who you are when you identify yourself by logging in with your username and password.
Digital Certificates
A digital certificate is an electronic identity issued by a trusted third party, called a Certificate Authority, who, in effect, verifies your identity. When you sign up for Iron Mountain LiveVault Service™ Backup and Recovery Service, Iron Mountain LiveVault Service™ creates and issues digital certificates that individually identify each protected server. The backup servers that receive your data also have their own unique digital certificates. These digital certificates enable a customer server and its associated Iron Mountain LiveVault Service™ servers to authenticate their identities to each other and to certify that they are to be trusted before they exchange data. Because only a Iron Mountain LiveVault Service™ Agent with a valid certificate can communicate with a Iron Mountain LiveVault Service™ Backup and Recovery Service server, it is virtually impossible for an unauthorized user to make a connection from any computer other than a protected server.
The basic components of a digital certificate are: name, electronic key, and signature. Electronic keys are essentially very large, 1024 bit numbers that are used to encrypt data. Keys may be public or private and are used in pairs. Public keys are keys you can disclose to a selected party. Private keys are kept to yourself. You can encrypt a piece of data with the public key and then send that data to a designated recipient. Using the other (private) key in this pair, the recipient can then decrypt it. So by encrypting data with a shared public key, you ensure that only parties who have the matching private key can “unlock” the data. This signature verification, combined with the secure transmission provided by the Secure Socket Layer, ensure confidential communication across authenticated connections.
When you use Iron Mountain LiveVault Service™ Backup and Recovery Service, you become part of Iron Mountain LiveVault Service™’s extended network. Iron Mountain LiveVault Service™ controls every node on this network, decides who has access, and issues digital certificates to every authorized user. Nobody else can create a certificate that both you and Iron Mountain LiveVault Service™ can trust.
Encryption Key
In addition to securing all transmission of your data, your data is fully encrypted using an encryption key known only to you. Your data is encrypted before leaving your server, and always remains encrypted when not on your server, even at the secure off-site vaulting center.
A Complete Internet Security Package
When deciding whether to use an Internet-based online backup and electronic vaulting service, data security is a valid concern. You want to know that your data is protected from loss, from tampering or theft, and from unauthorized access during its Internet journey from servers to data center. Iron Mountain LiveVault Service™ Backup and Recovery Service addresses these concerns with state-of-the-art security technology.
Iron Mountain LiveVault Service™ Internet security combines password-protected SSL-level web access, electronic key technology, advanced encryption techniques, and industry-standard digital certificates to produce a secure passage for data and guarantee the authenticity of sites sending or receiving data over the Internet.
Iron Mountain LiveVault Service™ Backup and Recovery Service guarantees that your data is fully protected using advanced technologies embraced by top companies worldwide.
Please contact us for more information, a free trial, and/or a price quote.
