SpiderOak 6 years Idea: Create a central repository of your data - - PowerPoint PPT Presentation

SpiderOak

• 6 years
• Idea: Create a central repository of your data
• Client based
• Windows, Mac, Linux, mobile platforms
• Backup data from all your devices
• Share any folder
• File-Synchronization of any folder

Unique Feature

• Zero knowledge approach
• Deduplication (only within your account

Block-Based and File-Based)

• File synchronization
• No convergent encryption!

Why no convergent encryption?

• Convergent encryption:

Encrypt Plaintext m: Key k = hash(m) Ciphertext c = encrypt(k, m)

• Serious privacy issues:
• Provider can see if you stored a file that he

has access to himself.

Why no convergent encryption?

• a database mp3 files → reveals your taste of

music

• INVOICE

Dear ______, for month ____ your fee is $___. Best regards, Non-Free-Download, Inc

„encryption, encryption, encryption“

• Privacy for you and the people you work with
• Mistakes can't reveal your data
• Authentication bypass can't reveal your data
• Legal reasons
• More?

SpiderOak Orange

SpiderOak Orange

• For private / small business usage
• Backup your data. Sync/Share
• All your data AND metadata is encrypted
• Password is required to unlock the encryption

keys

• Password never send to us

How does it work?

• Whole file synchronization process is done by

the client

• Deduplication is done by the client
• Client knows about all your meta-data
• Only encrypted meta-data is uploaded to

storage-server

SpiderOak Blue

• Two options: Hosted or private cloud

Hosted and Private Cloud

• It's the same zero knowledge approach.
• Client is mostly the same
• Only how authentication works changed and

key escrow added

• Authentication:

LDAP, RADIUS, soon: SAML

Virtual appliance

• Installed on your system, behind your firewall
• Web based management console
• LDAP (or AD) integration

provisioning, group permissions, and space management with LDAP

• Authentication service
• Key escrow server

Virtual appliance

• The first time it boots up it creates new keys
• You setup authentication / LDAP integration
• Ready to use

Thank you

Questions? Discussion?