| |
| Case Study |
| |
Patni's storage security solution enables
secured and automated management of encryption keys |
|
|
Patni's R&D team works as an extended arm of the client's team to develop the next generation security
solution with reduced time to market.
The Client
Our client is a premier storage security company. The company's
award-winning appliances automate the encryption of data that
is either in-flight over a storage network or at-rest on disk,
virtual tape, or tape media. The storage solutions are based
on several patent-pending technologies.
These products are sold to commercial enterprises and government agencies that need to address security risks
associated with offsite storage, tape media access, business continuity, consolidation, and privacy compliance. Current
customers include Fortune 500 companies, top financial institutions, leading manufacturers, biotechnology and healthcare companies, and government agencies.
The Challenge
Our client has initiated development of new generation global encryption/decryption key management systems with a vision to lead
the storage security industry. An R&D plan took off to develop the new platform in a very short time. Innovation needed more and more resources while short timelines made it tough to meet the
requirements. The only way out was to release resource from product enhancement and maintenance operations and associate a partner as extended arm of their R&D team which where Patni came in.
In a network of security appliances, a large number of encryption keys
are generated which needs to be managed securely and automatically.
Hence the client required the Patni R&D team to develop the following
features in its product:
 |
FIPS 140-2 Level 3 security |
|
Global key management |
|
True wire speed encryption |
|
Automated policy distribution |
|
Certified multi-vendor interoperability. |
The Solution
Patni leveraged its deep understanding of system technologies and security domain in consultation with Patni's innovation group and
provided a suitable solution. Random number generation is the key to high quality encryption and Patni's solution ensures generation of almost true random numbers.
Patni's responsibilities included:
|
End to end solution to generate highly entropic seed values for
random number generator |
|
Device driver implementation for security processor |
|
Porting security SDK to advanced versions of Linux |
|
Enabling the system for FIPS compliance. |
The Technology
|
Software implementations: Linux kernel modules, custom kernels, application software |
|
Software created based on: C, C++, MFC, FLTK, packing software on windows and Linux, SDK by Hifn |
|
Operating systems: RedHat Linux on 2.4 and 2.6 kernel and Windows technologies |
|
Domain: Data security using FIPS (Federal Information Processing Standard) |
|
Amongst other things, it includes encryption, decryption and random number generation using Hifn technologies, Von Neumann whitening algorithm, X9.31,
NIST 800-90. |
| |
 |
The Benefits
|
Reduced time-to-market by 3 months |
|
Zero defect product acceptance through Delivery and process excellence |
|
10% development cost saved through design innovation. |
|
