End-to-end Data-centric Security for the New Data-driven Economy
The month of May saw Hewlett Packard Enterprise (HPE) announce a new product release related to data security. The release was for HPE SecureData with Hyper Format-Preserving Encryption (FPE), and Hyper Secure Stateless Tokenization (SST). What is exciting about this release is the new Hyper FPE technology delivers a proven and NIST-standardized method of protecting data in use, at rest, and in motion. This is especially timely for government agencies, global enterprises, and European organizations that need to comply with the newly formed General Data Protection Regulation (GDPR) requirements. This release also includes Unicode format- and character set-preserving encryption for data in languages such as German, French, Spanish, Turkish, and more.
To further explain, HPE SecureData includes next generation technologies, Hyper FPE, Hyper SST, and HPE Stateless Key Management. HPE SecureData “de-identifies” data, rendering it useless to attackers, while maintaining its usability, usefulness, and referential integrity for data processes, applications and services. HPE SecureData neutralizes data breaches by making your protected data absolutely worthless to an attacker, whether it is in production, analytic systems, or test/development systems, such as training and quality assurance.
With the influx of cloud, Big Data and the Internet of Things (IoT), the attack surface is rapidly expanding, making it critical for organizations to take a data-centric approach to securing their sensitive information. In the event of a breach, strong end-to-end encryption and tokenization will render stolen data useless to attackers and thereby mitigate the financial, operational and reputational ramifications.
Hyper FPE for a New Era of Encryption in the Data-driven Economy
Hyper FPE is critical to protecting sensitive personal and structured data required by existing and emerging privacy frameworks – such as Personally Identifiable Information (PII), Protected Health Information (PHI) and Payment Card Industry (PCI) data, – while preserving the original data formats. As Hyper FPE protects virtually all types of sensitive data, it is optimized foruse cases that require de-identification of location information, mobile device personal identifiers, manufacturer identifier codes, and the expanded definitions of PII as detailed in the new GDPR legislation, to meet data security and privacy requirements.
HPE SecureData with Hyper FPE technology provides accelerated encryption performance up to 170% in conservative scenarios, building on today’s proven high-speed FPE technology, while aligning to the high volume needs of next generation Big Data, cloud, and IoT scenarios1. The result is a strong encryption scheme that allows for minimal modifications to the way that existing applications and databases work – significantly reducing complexity for customers.
Enhancing Data Security with Hyper SST
Enterprises, merchants and payment processors are challenged with protecting high value sensitive data such as PCI, and must comply with the Payment Card Industry Data Security Standard (PCI DSS) and data privacy laws that have ever increasing compliance scrutiny. To help customers address mounting complexities and costs, HPE SecureData with Hyper SST offers an enhanced, patented approach to tokenization that maximizes speed, scalability, security and manageability of the tokenization process, effectively doubling the existing “high octane” HPE SST tokenization performance.
HPE SecureData is NIST-standard using FF1 AES Encryption, which provides all the benefits of data-centric security delivered by Hyper FPE—the most flexible and powerful FPE available—with the ability to encrypt virtually unlimited data types.
Hyper FPE and Hyper SST are currently available as part of the HPE SecureData family delivering data security for compliance, governance and risk reduction across enterprise, cloud, big data, payments, mobile data capture, and mission critical systems.
1 Performance tested using HPE DL360 Gen 9 platform, 6 cores