RSA BSAFE Data Security Manager

The RSA BSAFE Data Security Manager is a platform that enables organizations to separate the definition/enforcement of security policies as they regard to sensitive organizational data from the process of application development. The platform operates as a data access middleware gateway, providing interfaces to developers for the accessing of their required data. Developers design their applications utilizing the interfaces provided by the middleware platform, and security personnel maintain the policies required to protect the data being accessed.

The platform consists of a library of security mechanisms (such as encryption/decryption, certificate processing, signing/verifying, etc.) and an enforcement engine for the application of those policies to specified data. Security policies are defined by security administrators, by classifying the organization's data and then mapping those classifications to required security mechanisms. Developers then access sensitive data using the provided interfaces of the platform; and needn't have in-depth knowledge of the low-level details required to implement the desired security method on the data. The platform intercepts all such data requests and applies the appropriate security mechanism to it based on the defined policies. Such policies can be changed as needed; without requiring changes to the applications coded to use the platform's interfaces. Auditable security logs are maintained to assist in forensic analysis.

The platform supports the application of multiple security algorithms to specified data, including Public Key algorithms such as RSA, Symmetric Ciphers (secret key), AES, RC5, RC4, RC2, DES and 3DES; message digests, including MD2, MD5, HMAC, SHA-1, SHA-2 and HMAC; and standards including x.509 v3 and PKCS #7. The cryptographic module is FIPS 140 validated.

The platform operates on Windows, Linux (Red Hat) or Solaris platforms (the vendor notes that ports to mainframes and other platforms are also available) and can be accessed from applications written in C/C++, C#, VB, VB.NET, and Java.

The RSA BSAFE Data Security Manager is expected to be available in late September. Contact RSA Security for further information.