The loss of trade secrets and intellectual property is a well-known problem and has been one for a long time. The consequences are severe and major damage has been caused to the US as a nation, and to many public and private organizations. When it comes to secrets, it’s not just external threats, that must be accounted for. Whether malicious or not, insiders are often the source of a leak or theft. When it comes to these types of materials, the first problem can be lack of control over the materials in question. There is an immediate risk unless there has been a very rigorous control over access and usage of every single copy of every single material. That can be challenging when numerous people contribute to the process of building a secret set of specifications.

PrivacyChain offers defense-in-depth

• Materials can be located through any metadata associated with a file – who, when, title etc.
  Multi-level security can be applied:

• Starting with “where?”. Centralized storage of materials invites an attack. A distributed architecture allows materials to be scattered across an organization’s devices. An attacker must find out where their target files are stored.

• Each file will be individually encrypted with its own unique key. Encryption can be to any standard, including so-called quantum resistant encryption. Each file, once located by an attacker and must be individually and separately decrypted.

• “String of code” – even when a file is decrypted, that decryption could reveal just a further level of protection, for example: a book code that requires knowledge of the book, edition etc.

• Access controls can be set and enforced on each file, for example:

• Document access could be restricted to CEO, Chief Legal Officer and Chief Scientist.

• CEO access could be read only. Nobody can download or print the file.

• Access controls can be as granular as needed. Time, location, quantity etc. Access could even be restricted to one of three, identified, devices in the organization.

• Each access of the file could result in an immediate alert to the Chief Security Officer

• An immutable recording is created of every action taken on the file, who, when, what and where

• These controls could be applied across organizational boundaries...

The protection of US national and enterprise secrets is of paramount importance and PrivacyChain offers a solution that is ready to deploy.